Re: SNI problem - the client side

2020-06-14 Thread Wietse Venema
Wietse Venema: > J?n M?t?: > > My last question is whether is it possible to include the Postfix > > TLSv1.3 patch in older versions of Postfix (minor bug fix release). > > The problem is that with enabled SNI in MTA-STS package, there > > will be lot of bug reports - because it looks like I am not

Re: [postfix] error / mail for mail.mydomain.fr loops back to myself

2020-06-14 Thread Matus UHLAR - fantomas
On 13.06.20 23:42, olivier wrote: I'm trying to configure postfix as internet site. The vm (centos) is under proxmox, and behind pfsense (fw). tcp/587 ; tcp/25 are reachable from the internet. When I try to send an email from outside to a user on this server, the /var/log/maillog shows the error 

Re: SNI problem - the client side

2020-06-14 Thread Wietse Venema
J?n M?t?: > My last question is whether is it possible to include the Postfix > TLSv1.3 patch in older versions of Postfix (minor bug fix release). > The problem is that with enabled SNI in MTA-STS package, there > will be lot of bug reports - because it looks like I am not the > only person who us

Re: usage for late-match-> REJECT using milter_header_checks ?

2020-06-14 Thread Wietse Venema
PGNet Dev: > On 6/13/20 4:05 PM, Wietse Venema wrote: > > Postfix has milter_header_checks for message headers > > that are added by a Milter. > > yes. that's exactly what I referenced in my OP, and included in my config. > > what exactly is your point? You are disabling the header_checks with r

Re: SNI problem - the client side

2020-06-14 Thread Ján Máté
Hi all, just for info: new Postfix MTA-STS resolver package was released - https://github.com/Snawoot/postfix-mta-sts-resolver/pull/64 (cite the author: "I guess Debian packages will be available within a week in backports repo"), s